---
title: "SURFconext"
slug: "surfconext"
updated: 2026-09-07T06:45:19Z
published: 2026-09-07T06:45:19Z
canonical: "docs.connect.visma.com/surfconext"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.connect.visma.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SURFconext

## Guide to configure SURFconext as an Identity Provider within Visma

Follow the steps below to configure **SURFconext** as an Identity Provider within Visma.

### Prerequisites

- SURFconext account
- Enable Visma Connect as a service for your IdP
- All of your users under your account in Visma will need a pre-existing account in SURFconext with exactly the same email address.

### A. Configure Visma Single Sign-On app with SURFconext

1. Sign in into Authentication Settings and go to the Single Sign-On page.
2. Add a [MyDomain](/v1/docs/single-sign-on) if not already done.
3. Click “Add SAML2 identity provider”.
4. Click on the SURFconext option.

![SURFconext button](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_IDP_SurfConext_1.png?sv=2026-02-06&spr=https&st=2026-10-30T03%3A39%3A32Z&se=2026-10-30T04%3A39%3A32Z&sr=c&sp=r&sig=XVpoSrFznHtGwUFQZRb7O46bP5vdOQPAji4e7T%2FfmAs%3D)

1. Select the domain name the users will authenticate towards Visma with.

![SURFconext configuration](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_IDP_SurfConext_2.png?sv=2026-02-06&spr=https&st=2026-10-30T03%3A39%3A32Z&se=2026-10-30T04%3A39%3A32Z&sr=c&sp=r&sig=XVpoSrFznHtGwUFQZRb7O46bP5vdOQPAji4e7T%2FfmAs%3D)

1. Enable Just-In-Time provisioning to allow users to be created if they don’t already exist in Visma, first time the user authenticates.
2. Click **Save**.

### Testing Single Sign-On after Visma has made its configuration

To make sure SSO is working, perform this step:

1. To test SSO access go to your Visma MyDomain e.g. https://example.my.connect.visma.com directly, and then click the **Sign in with SURFconext** button.